Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3234382e302f32322d3234203d3e203631363936.roa
File:                     3230312e3134302e3234382e302f32322d3234203d3e203631363936.roa (raw, json)
Hash identifier:          Vm4//6NuA8qzXn6G9CJO6WBGACwwmoNdInYVGBwN10Q=
Subject key identifier:   F8:7C:BB:64:AD:FB:75:B0:77:47:D4:7D:C6:BB:B7:65:10:BD:E6:81
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       7C649F182FD5D4F98376E6E6B9DEE91F6828D20C
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3234382e302f32322d3234203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 20:35:22 +0000
ROA not before:           Fri 06 Oct 2023 20:30:22 +0000
ROA not after:            Fri 04 Oct 2024 20:35:22 +0000
asID:                     61696
IP address blocks:        201.140.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:64:9f:18:2f:d5:d4:f9:83:76:e6:e6:b9:de:e9:1f:68:28:d2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 20:30:22 2023 GMT
            Not After : Oct  4 20:35:22 2024 GMT
        Subject: CN=F87CBB64ADFB75B07747D47DC6BBB76510BDE681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:c8:e4:5d:81:5f:45:22:12:ba:6a:e2:6b:
                    1f:80:1f:31:9f:b6:8c:93:9c:bd:bd:62:fc:5e:55:
                    b8:2b:3e:5e:68:3c:1c:35:c4:a6:79:de:02:07:c4:
                    f9:22:e0:56:72:43:40:9f:ec:6a:06:d0:ae:8a:8b:
                    6d:25:5b:3b:c1:83:ee:19:5e:32:9c:ee:09:40:72:
                    61:2d:38:30:9b:1b:c8:18:e6:b1:99:f7:51:df:f5:
                    0b:df:5d:8b:3f:7d:06:31:f9:a8:4f:75:c4:ab:d4:
                    fc:12:cb:29:a7:a3:0b:8f:78:a3:21:ba:87:3d:71:
                    72:0e:73:1b:5e:93:5f:3a:ab:7a:58:93:aa:e0:d7:
                    7b:b5:af:cb:1d:02:09:8a:5d:44:f1:07:a6:a7:b5:
                    bf:89:c1:5c:3f:da:09:2e:93:ab:dc:81:30:17:16:
                    d4:84:1d:67:96:d9:f6:d9:45:88:92:0c:9c:fb:13:
                    ae:47:93:6c:ff:12:b3:22:b7:f7:59:e0:2e:7d:b9:
                    ac:cc:e9:83:24:0a:78:43:22:50:7f:da:99:bf:d4:
                    92:d2:c0:81:89:83:bf:06:43:c6:99:d9:3b:ac:32:
                    4a:b0:64:b9:43:b8:35:f4:a7:b6:da:6d:ed:00:cd:
                    73:95:b8:5e:83:56:57:f0:85:d0:80:86:5c:05:40:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7C:BB:64:AD:FB:75:B0:77:47:D4:7D:C6:BB:B7:65:10:BD:E6:81
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3234382e302f32322d3234203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:66:06:11:93:f6:c4:94:d2:e4:8d:11:39:98:9e:c2:9d:57:
         4b:c1:58:66:fb:ff:cf:94:71:53:d1:91:fc:b2:06:74:26:9f:
         18:4a:e7:c6:06:a9:6e:df:da:85:3f:2f:73:e9:cc:33:57:df:
         e1:0d:b0:de:f3:8e:c1:7d:b3:72:6d:c6:b7:78:6f:c8:53:55:
         63:60:94:6a:0c:a4:cc:11:da:c4:20:9e:8c:0c:f2:e8:2c:dd:
         7d:76:83:52:4c:3f:ba:83:cc:68:63:9d:c4:60:7a:b4:eb:08:
         21:db:2b:7f:1a:57:32:86:ca:29:92:f2:84:f0:aa:23:b0:b2:
         a8:2b:4c:4d:74:df:e1:bb:73:50:70:f3:bc:fc:5b:5a:f6:2f:
         43:bb:80:46:50:c8:a2:6a:43:70:17:86:e9:31:a4:60:97:79:
         9b:a7:90:a1:8e:76:31:1f:6a:3a:27:19:32:2b:5c:42:6a:48:
         ec:39:49:8d:29:64:21:a4:e9:59:57:6e:b8:3e:4f:f7:bd:0c:
         d4:4c:b1:85:d6:20:4d:c6:b2:4f:ba:68:13:38:c6:fa:7d:66:
         55:3b:c6:e5:cc:43:19:f9:d1:5b:d0:c4:4a:c0:ea:db:43:d1:
         7e:ef:ae:9f:61:1d:1a:2e:99:b5:fa:c4:61:b9:93:86:3c:4b:
         2d:7d:64:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:20:33 2025 by rpki-client